Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/qn7-xSOm3GNFbVMeEpI89BCHyGs.roa
File: qn7-xSOm3GNFbVMeEpI89BCHyGs.roa (raw, json)
Hash identifier: OAD6prCAz8lBbB+PhlF1Idqkbd0upRCxQF4VAJd3pnc=
Subject key identifier: AA:7E:FE:C5:23:A6:DC:63:45:6D:53:1E:12:92:3C:F4:10:87:C8:6B
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 019FF769C28C34BA0565D260C9511E8718D2
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/qn7-xSOm3GNFbVMeEpI89BCHyGs.roa
Signing time: Wed 12 Aug 2026 19:18:51 +0000
ROA not before: Wed 12 Aug 2026 19:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43733
IP address blocks: 31.7.160.0/21 maxlen: 21
46.130.0.0/16 maxlen: 16
46.130.0.0/17 maxlen: 17
46.130.128.0/17 maxlen: 17
46.130.255.0/24 maxlen: 24
77.95.188.0/22 maxlen: 22
83.139.24.0/21 maxlen: 21
83.139.24.0/22 maxlen: 22
83.139.28.0/22 maxlen: 22
83.139.32.0/22 maxlen: 22
91.103.24.0/21 maxlen: 21
91.103.56.0/21 maxlen: 21
93.94.216.0/21 maxlen: 21
95.140.192.0/20 maxlen: 20
185.36.36.0/22 maxlen: 22
185.36.36.0/24 maxlen: 24
185.79.0.0/24 maxlen: 24
217.76.0.0/20 maxlen: 20
217.76.0.0/21 maxlen: 21
217.76.0.0/24 maxlen: 24
217.76.1.0/24 maxlen: 24
217.76.2.0/24 maxlen: 24
217.76.8.0/21 maxlen: 21
2a00:1f28::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:69:c2:8c:34:ba:05:65:d2:60:c9:51:1e:87:18:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Aug 12 19:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa7efec523a6dc63456d531e12923cf41087c86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:ff:af:95:b5:19:5c:75:3b:d1:1d:ba:dc:
ff:cf:77:53:da:63:c3:b3:21:44:eb:f6:68:6b:23:
fe:6d:b5:d5:c8:e2:68:1b:ef:a7:48:2b:ab:b6:c0:
49:a2:75:42:3e:5d:3e:e3:8f:b2:3b:52:2d:2c:ab:
c7:24:c0:d7:3e:ec:df:54:a6:4c:f3:99:22:b6:a4:
42:6b:09:6e:83:82:5e:6d:98:3f:49:27:6e:57:3f:
c8:38:39:f9:b5:fb:5f:53:7b:2c:11:c1:1d:e8:e0:
73:12:be:79:ea:23:e3:27:b6:b0:56:f5:15:3e:25:
34:c9:b5:e0:31:cd:c6:5f:d4:65:1f:96:d4:5f:a4:
b0:2d:f2:34:f5:a6:de:ab:16:a3:39:49:1e:30:48:
9e:2e:28:a5:30:04:65:fe:e3:6d:79:90:63:78:87:
d0:91:72:5c:8a:06:d3:5a:6c:9a:c8:90:fd:5a:b0:
a2:3f:42:5f:5f:90:dd:56:70:95:73:9e:e9:6c:c0:
6a:57:94:b4:68:b3:b6:80:76:01:41:be:98:09:65:
c4:bc:35:ab:f2:47:de:a0:ea:80:b0:92:5f:e7:77:
05:39:5d:f8:e6:c6:b9:6a:2c:9e:16:8c:32:af:0c:
7c:5e:c7:36:b0:38:35:ee:95:0b:3e:a2:e8:c0:06:
1e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7E:FE:C5:23:A6:DC:63:45:6D:53:1E:12:92:3C:F4:10:87:C8:6B
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/qn7-xSOm3GNFbVMeEpI89BCHyGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.160.0/21
46.130.0.0/16
77.95.188.0/22
83.139.24.0-83.139.35.255
91.103.24.0/21
91.103.56.0/21
93.94.216.0/21
95.140.192.0/20
185.36.36.0/22
185.79.0.0/24
217.76.0.0/20
IPv6:
2a00:1f28::/32
Signature Algorithm: sha256WithRSAEncryption
42:df:a8:40:f8:88:99:af:18:26:ed:21:30:31:77:68:d7:9b:
d4:8f:42:22:18:d4:ef:28:8f:d8:1f:4e:6b:a6:3b:7a:2f:18:
86:14:73:88:7c:1f:75:ff:88:79:11:86:a8:af:4b:59:82:d5:
50:ec:8e:dd:07:3e:1c:41:5b:2d:b6:33:1d:5b:8a:92:91:75:
2a:99:fa:19:77:9c:62:4c:96:81:16:fa:bf:34:a2:9e:5d:0a:
93:e9:04:34:93:db:84:b8:32:53:e9:da:84:b2:81:9f:46:39:
56:f2:3c:1b:2e:f5:19:b8:14:19:75:d4:68:bf:5c:85:b9:6c:
03:b6:66:e8:c8:a0:3a:2f:63:37:72:c9:c8:c8:ea:3f:1d:20:
4b:76:b3:90:63:36:29:7f:77:fc:29:9c:81:63:d3:33:63:08:
0e:a6:52:e4:43:29:9b:84:1e:7a:cb:af:14:e4:d1:75:55:2c:
56:1b:c0:c5:f7:ee:53:2a:e4:4a:c2:bc:ea:aa:20:59:50:66:
18:5d:ac:18:5d:08:8f:f9:d2:21:a0:a0:78:99:eb:e4:8b:14:
7a:a7:e3:d9:7b:89:6d:16:de:6f:52:6d:ed:27:95:7a:b0:72:
42:a6:18:d2:0e:8d:ed:5a:14:b5:91:5f:cd:53:c7:b1:f7:1e:
10:2a:ff:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:25:49 2026 by rpki-client